First off, it is not related to Kazaa Lite, and Second, is your antivirus up to date. Try running an online scan at Housecall Trend Micro and see if it finds anything. It is strange that the file would start in the temp folder. I would suspect it is a broser hijack or maybe a virus. I would disable and rename the file see what it does. More than likely on my computer I would get rid of it.

Thanks for the link FF. CWS got me no further BUT hijackthis got me a solution of sorts.

I ended up deleting Browser helper object and registry keys etc with H-this until I found I could delete the "kranhdc" reg entries AND not have them reload on restart.

I then went into safe mode command prompt and deleted the kranhdc file.

That was an hour ago and it hasn&#39;t returned.

Bit of a "sawn-off" shotgun approach but its gone. If was doing something useful it may show up in the future when something doesn&#39;t work properly (hopefully the wife&#39;s Ebay or Pogo accounts&#33.

Thanks for all the interest and tips.

PS all AV and other scanning software has been uptodate throughout so they don&#39;t know or aren&#39;t bothered about it.

PPS I&#39;d still like to know what the frell it was&#33;

DOWNLOADING IS FUN - SHARING IS SUBLIME
When all else fails - read the instructions!!!LEEDS UNITED - WE'LL BE BACK

It could just be that the folks at Symantec, Spybot et all have not come across it before, so you could drop them a line to alert them.
If the program is legit, it&#39;s unlikely to be that hard to get rid of... unless it&#39;s from QT or Real.

There isn't a bargepole long enough for me to work on [a Sony Viao] - clocker 2008